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CLAIMS 



What is claimed is: 



1 



1. 



A method comprising: 



2 



generating a user identity value associated with a user identity; 



3 



storing the user identity value; 



4 



generating a registry security value associated with a system registry; 



5 



storing the registry security value; and 



6 



authenticating the system registry after reading the system registry. 



1 2. A method as in claim 1 , wherein generating a user identity value associated with a 

2 user identity comprises inserting at least one of the username and password in a one-way 

3 function to obtain the user identity value associated with the user identity. 

13. A method as in claim 1 , wherein generating a registry security value associated 

2 with a system registry comprises: 

3 concatenating system registry information; and 

4 inserting the concatenated system registry information in a one-way function to obtain the 

5 registry security value. 
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14. A method as in claim 3, wherein concatenating system registry information 

2 comprises concatenating at least one of system registry files and system registry handle 

3 keys. 

1 5. A method as in claim 1 wherein authenticating the system registry after reading 

2 the system registry comprises: 

3 generating a new registry security value; 

4 comparing the new registry security value with the stored registry security value; and 

5 allowing processing to continue if the new registry security value is equal to the stored 

6 registry security value. 

16. A method as in claim 1 further comprising modifying the system registry in 
2 response to being provided the user identity value and the registry security value. 

1 7. A method comprising: 

2 detecting an attempt to change a system registry; 

3 generating a user identity value associated with the user identity; 

4 comparing the user identity value with a stored user identity value; and 

5 modifying the system registry in response to being provided the user identity 

6 value equal to the stored user identity value. 
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18. A method as in claim 7, wherein modifying the system registry in response to 

2 being provided the user identity value comprises modifying the system registry in 

3 response to an application program providing the user identity value. 

1 9. A method as in claim 7, wherein detecting an attempt to change a system registry 

2 comprises detecting an attempt to write to the system registry. 

1 10. An article of manufacture comprising: 

2 a machine-accessible medium including instructions that, when executed by a 

3 machine, causes the machine to perform operations comprising 

4 generating a user identity value associated with a user identity; 

5 storing the user identity value; 

6 generating a registry security value associated with a system registry; 

7 storing the registry security value; and 

8 authenticating the system registry after reading the system registry. 

1 11. An article of manufacture as in claim 1 0 wherein instructions generating a user 

2 identity value associated with a user identity comprises further instructions for inserting 

3 at least one of the user's username and password in a one-way function to obtain the user 

4 identity value associated with the user identity. 



1 12. An article of manufacture as in claim 1 0 wherein instructions for generating a 

2 registry security value associated with a system registry comprises further instructions for 
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3 



concatenating system registry information; and 



4 



inserting the concatenated system registry information in a one-way function to 



5 obtain the registry security value. 

1 13. An article of manufacture as in claim 1 2, wherein instructions for concatenating 

2 system registry information comprises further instructions for concatenating at least one 

3 of system registry files and system registry handle keys. 

1 14. An article of manufacture as in claim 1 0 wherein instructions for authenticating 

2 the system registry after reading the system registry comprises further instructions for 

3 generating a new registry security value; comparing the new registry security value with 

4 the stored registry security value; and 



5 allowing processing to continue if the new registry security value is equal to the stored 

6 registry security value. 



1 15. An article of manufacture as in claim 10 further comprising instructions for 

2 modifying the system registry in response to being provided the user identity value and 

3 the registry security value 



1 16. An article of manufacture comprising: 



2 



a machine-accessible medium including instructions that, when executed by a 



3 machine, causes the machine to perform operations comprising 



4 



detecting an attempt to change a system registry; 
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5 generating a user identity value associated with the user identity; 

6 comparing the user identity value with a stored user identity value; and 

7 modifying the system registry in response to being provided the user identity 

8 value equal to the stored user identity value. 

1 17. An article of manufacture as in claim 1 6, wherein instructions modifying the 

2 system registry in response to being provided the user identity value comprises further 

3 instructions for modifying the system registry in response to an application program 

4 providing the user identity value. 

1 18. An article of manufacture as in claim 16, wherein instructions for detecting an 

2 attempt to change a system registry comprises further instructions for detecting an 

3 attempt to write to the system registry. 



1 19. An apparatus comprising: 

2 a bus; 

3 a data storage device coupled to said bus; and 

4 a processor coupled to said data storage device, said processor operable to receive 

5 instructions which, when executed by the processor, cause the processor to 

6 generate a user identity value associated with a user identity; 

7 store the user identity value; 

8 generate a registry security value associated with a system registry; 

9 store the registry security value; and 
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1 0 authenticate the system registry after reading the system registry. 

1 20. An apparatus as in claim 1 9, wherein the processor operable to receive 

2 instructions which, when executed by the processor, cause the processor to 

3 generate a user identity value associated with a user identity comprises the processor to 

4 insert at least one of the username and password in a one way function to obtain the user 

5 identity value. 

1 21. An apparatus as in claim 19, wherein the processor operable to receive 

2 instructions which, when executed by the processor, cause the processor to 

3 generate a registry security value associated with a system registry comprises the 

4 processor to concatenate system registry information; and to insert the concatenated 

5 system registry information in a function to obtain the registry security value. 

1 22. An apparatus as in claim 2 1 , wherein the processor to concatenate system registry 

2 information comprises the processor to concatenate at least one of system registry files 

3 and system registry handle keys. 

1 23 . An apparatus as in claim 1 9 wherein the processor operable to receive instructions 

2 which, when executed by the processor, cause the processor to authenticate the system 

3 registry after reading the system registry comprises the processor to generate a new 

4 registry security value; 

5 compare the new registry security value with the stored registry security value; and 
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6 allow processing to continue if the new registry security value is equal to the stored 

7 registry security value. 

1 24. An apparatus as in claim 1 9 wherein the processor operable to receive instructions 

2 which, when executed by the processor, further causes the processor to modify the 

3 system registry in response to being provided the user identity value and the registry 

4 security value. 

1 25 . An apparatus comprising: 

2 a bus; 

3 a data storage device coupled to said bus; and 

4 a processor coupled to said data storage device, said processor operable to 

5 receive instructions which, when executed by the processor, cause the processor to 

6 detect an attempt to change a system registry; 

7 generate a user identity value associated with the user identity; 

8 compare the user identity value with a stored user identity value; and 

9 modify the system registry in response to being provided the user identity value 
1 0 equal to the stored user identity value. 

1 26. An apparatus as in claim 25, wherein the processor operable to receive 

2 instructions which, when executed by the processor, cause the processor to modify the 

3 system registry in response to being provided the user identity value comprises the 
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4 processor to modify the system registry in response to an application program providing 

5 the user identity value. 

1 27. An apparatus as in claim 25, wherein the processor operable to receive 

2 instructions which, when executed by the processor, cause the processor to detect an 

3 attempt to change a system registry comprises the processor to detect an attempt to write 

4 to the system registry. 
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